# JWT.io **URL:** https://community.auth0.com/c/jwt/8.md?page=4 [Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md) **Page:** 5 --- ## [What if a token recipient (in a request chain) does not have access to the public key?](https://community.auth0.com/t/what-if-a-token-recipient-in-a-request-chain-does-not-have-access-to-the-public-key/92449)
**Author:** [@Steve973](https://community.auth0.com/u/Steve973)\ **Replies:** 3\ **Last updated:** [October 28, 2022, 9:34pm UTC](https://community.auth0.com/t/what-if-a-token-recipient-in-a-request-chain-does-not-have-access-to-the-public-key/92449 "2022-10-28T21:34:41Z")
Hello, all. I have an application stack that has some Java services and some Python services. If a user initiates a request, and then a token is created (RSA-384) in a Java service, it may make its way to a Python serv… --- ## [How JWT Expiration works?](https://community.auth0.com/t/how-jwt-expiration-works/93049)
**Author:** [@venukrishna.tumuluri](https://community.auth0.com/u/venukrishna.tumuluri)\ **Replies:** 1\ **Last updated:** [October 26, 2022, 1:20pm UTC](https://community.auth0.com/t/how-jwt-expiration-works/93049 "2022-10-26T13:20:03Z")
hey there, I am new to using JWT and I was wondering how the expiration works. I looked into jwt in march 2022 and read the max time for expiry is 2 hours but when I am looking now it says the max expiration is 24 hour… --- ## [Generate JWT with custom claims from within Rule?](https://community.auth0.com/t/generate-jwt-with-custom-claims-from-within-rule/90529)
**Author:** [@camf](https://community.auth0.com/u/camf)\ **Replies:** 2\ **Last updated:** [January 8, 2024, 8:11am UTC](https://community.auth0.com/t/generate-jwt-with-custom-claims-from-within-rule/90529 "2024-01-08T08:11:12Z")
I am using a custom Rule to modify a SAML attributes mapping for SSO. I am running Hasura with JWT authentication that depends on custom claims to determine data access privileges. It is my understanding that I can add… --- ## [getAccessTokenSilently Auth0 Session TTL](https://community.auth0.com/t/getaccesstokensilently-auth0-session-ttl/89219)
**Author:** [@joe.a](https://community.auth0.com/u/joe.a)\ **Replies:** 2\ **Last updated:** [August 23, 2022, 5:53am UTC](https://community.auth0.com/t/getaccesstokensilently-auth0-session-ttl/89219 "2022-08-23T05:53:13Z")
The function getAccessTokenSilently has the option to ignoreCache https://auth0.github.io/auth0-spa-js/interfaces/gettokensilentlyoptions.html#ignorecache What is the TTL of this cache on the auth0 side, and is there a… --- ## [Generating JWT via API](https://community.auth0.com/t/generating-jwt-via-api/89248)
**Author:** [@sarangtkg.1](https://community.auth0.com/u/sarangtkg.1)\ **Replies:** 2\ **Last updated:** [August 23, 2022, 1:42pm UTC](https://community.auth0.com/t/generating-jwt-via-api/89248 "2022-08-23T13:42:38Z")
Hi Experts, Is there a way to generate JWT via API from jwt.io --- ## [Why no equal signs at the end of Base 64 encoding?](https://community.auth0.com/t/why-no-equal-signs-at-the-end-of-base-64-encoding/87853)
**Author:** [@RandySK](https://community.auth0.com/u/RandySK)\ **Replies:** 3\ **Last updated:** [July 29, 2022, 12:06pm UTC](https://community.auth0.com/t/why-no-equal-signs-at-the-end-of-base-64-encoding/87853 "2022-07-29T12:06:06Z")
I have text that I base 64 encoded in several places and have gotten the same value. When I put this data into the payload area of the JWT debugger, it comes up without the 2 equal signs at the end. Why is this? Is it… --- ## [How to generate JWT token using API key and Secret key in .net core](https://community.auth0.com/t/how-to-generate-jwt-token-using-api-key-and-secret-key-in-net-core/87579)
**Author:** [@Sarath](https://community.auth0.com/u/Sarath)\ **Replies:** 1\ **Last updated:** [July 25, 2022, 1:12pm UTC](https://community.auth0.com/t/how-to-generate-jwt-token-using-api-key-and-secret-key-in-net-core/87579 "2022-07-25T13:12:34Z")
Hi friends, How to generate jwt token using .net core. --- ## [Is the debugger on jwt.io able to validate EdDSA signatures?](https://community.auth0.com/t/is-the-debugger-on-jwt-io-able-to-validate-eddsa-signatures/85282)
**Author:** [@jim-auth0](https://community.auth0.com/u/jim-auth0)\ **Replies:** 2\ **Last updated:** [July 25, 2022, 12:54pm UTC](https://community.auth0.com/t/is-the-debugger-on-jwt-io-able-to-validate-eddsa-signatures/85282 "2022-07-25T12:54:09Z")
Hi, Is the debugger on jwt.io able to validate EdDSA signatures? I’m working on a client library for validating JWTs (yes, we need another one because it supports asynchronous discovery of JWKs using Vertx … --- ## [Using idToken to access internal API](https://community.auth0.com/t/using-idtoken-to-access-internal-api/87256)
**Author:** [@tamlynfm](https://community.auth0.com/u/tamlynfm)\ **Replies:** 5\ **Last updated:** [July 21, 2022, 11:18pm UTC](https://community.auth0.com/t/using-idtoken-to-access-internal-api/87256 "2022-07-21T23:18:08Z")
I have an Auth0 Native application, used by a React Native mobile app, for which Auth0 provides credentials with an encrypted accessToken and an idToken. I can use the access token to call the /userinfo endpoint. And I c… --- ## [Revoke refresh token implementation](https://community.auth0.com/t/revoke-refresh-token-implementation/87208)
**Author:** [@pandemic428](https://community.auth0.com/u/pandemic428)\ **Replies:** 4\ **Last updated:** [July 19, 2022, 6:52pm UTC](https://community.auth0.com/t/revoke-refresh-token-implementation/87208 "2022-07-19T18:52:31Z")
Hello! I’m kinda new to implement JWT mechanism to system and what I have done so far is access token and refresh token. But how can I implement revoke mechanism for log out for example? Currently I have refresh token ro… --- ## [Error in secret or public key callback](https://community.auth0.com/t/error-in-secret-or-public-key-callback/85817)
**Author:** [@nitzanl](https://community.auth0.com/u/nitzanl)\ **Replies:** 1\ **Last updated:** [June 28, 2022, 5:03pm UTC](https://community.auth0.com/t/error-in-secret-or-public-key-callback/85817 "2022-06-28T17:03:42Z")
I’ve get thise error while trying to verify an JWT token, what can cause this error? :slight\_smile: error in secret or public key callback: Unable to find a signing key that matches '......' --- ## [I'm getting \`UnauthorizedError: jwt malformed at new UnauthorizedError\` with \`credentialsRequired: false\`](https://community.auth0.com/t/im-getting-unauthorizederror-jwt-malformed-at-new-unauthorizederror-with-credentialsrequired-false/85400)
**Author:** [@Norby](https://community.auth0.com/u/Norby)\ **Replies:** 2\ **Last updated:** [June 25, 2022, 7:22am UTC](https://community.auth0.com/t/im-getting-unauthorizederror-jwt-malformed-at-new-unauthorizederror-with-credentialsrequired-false/85400 "2022-06-25T07:22:41Z")
I’m trying to implement an API endpoint where presence of a token is optional. If I understand this correctly, the way to do this is to add credentialsRequired: false as one of the params to the middleware. However, req… --- ## [Custom Claims not being added for expo requests](https://community.auth0.com/t/custom-claims-not-being-added-for-expo-requests/66977)
**Author:** [@clee](https://community.auth0.com/u/clee)\ **Replies:** 11\ **Last updated:** [June 22, 2022, 8:31am UTC](https://community.auth0.com/t/custom-claims-not-being-added-for-expo-requests/66977 "2022-06-22T08:31:43Z")
Hi, Not sure if this is the correct category and I have been looking through multiple threads and having issues finding any answers. I have created an expo app and utilised the auth0 example from the following link: H… --- ## [Random 401 response with "invalid\_header: unable to find appropriate key" when calling python flask API](https://community.auth0.com/t/random-401-response-with-invalid-header-unable-to-find-appropriate-key-when-calling-python-flask-api/81664)
**Author:** [@chu](https://community.auth0.com/u/chu)\ **Replies:** 5\ **Last updated:** [June 7, 2022, 8:07am UTC](https://community.auth0.com/t/random-401-response-with-invalid-header-unable-to-find-appropriate-key-when-calling-python-flask-api/81664 "2022-06-07T08:07:59Z")
Hi, I have been struggling a lot with Auth0 with random 401 response when calling either auth0 apis or my own python flask API. This has been lasting for a long time. My environment: Nodejs 16, Nextjs 12.1.4, Nextjs-a… --- ## [First time login missing permissions in the access token](https://community.auth0.com/t/first-time-login-missing-permissions-in-the-access-token/84494)
**Author:** [@jjones1](https://community.auth0.com/u/jjones1)\ **Replies:** 3\ **Last updated:** [November 1, 2022, 8:38pm UTC](https://community.auth0.com/t/first-time-login-missing-permissions-in-the-access-token/84494 "2022-11-01T20:38:25Z")
Hello! When a user logs in to our iOS app for the first time, the JWT access token does not contain any permissions until the second time they login. From what I have read so far, it seems this is because the Auth0 act… --- ## [Verifying JWT in browser using public key](https://community.auth0.com/t/verifying-jwt-in-browser-using-public-key/83329)
**Author:** [@ScottKnick](https://community.auth0.com/u/ScottKnick)\ **Replies:** 1\ **Last updated:** [September 27, 2022, 12:04am UTC](https://community.auth0.com/t/verifying-jwt-in-browser-using-public-key/83329 "2022-09-27T00:04:02Z")
I’m near certain a hundred different versions of this question must have been asked by now, but I want to explain my scenario specifically because security is easy to mess up. In my case, my site’s server is providing a… --- ## [Access user permissions array in user token](https://community.auth0.com/t/access-user-permissions-array-in-user-token/83024)
**Author:** [@tkiddle](https://community.auth0.com/u/tkiddle)\ **Replies:** 1\ **Last updated:** [May 6, 2022, 6:08pm UTC](https://community.auth0.com/t/access-user-permissions-array-in-user-token/83024 "2022-05-06T18:08:11Z")
Why on earth is it so difficult to access a user’s “permissions” from within a react application? I have a single-page application, and my user has some roles and permissions attached to it. I can create a custom rule … --- ## [NotBefore value in token is very recent](https://community.auth0.com/t/notbefore-value-in-token-is-very-recent/80993)
**Author:** [@nrebagliati](https://community.auth0.com/u/nrebagliati)\ **Replies:** 2\ **Last updated:** [April 4, 2022, 5:34pm UTC](https://community.auth0.com/t/notbefore-value-in-token-is-very-recent/80993 "2022-04-04T17:34:36Z")
I’m having a problem, the NotBefore value in the jwt has a very recent value. So if the server has a minimal (milliseconds) out of sync with auth0 server the token is not valid. Okta for example generates the NotBefore… --- ## [Would it be possible to sign a jwt token with a RSA public key?](https://community.auth0.com/t/would-it-be-possible-to-sign-a-jwt-token-with-a-rsa-public-key/80978)
**Author:** [@cvfelipeoliveira](https://community.auth0.com/u/cvfelipeoliveira)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 4:31pm UTC](https://community.auth0.com/t/would-it-be-possible-to-sign-a-jwt-token-with-a-rsa-public-key/80978 "2022-04-04T16:31:30Z")
I can sign the token with the private key. see the code below. I would like to change it and make it sign with the public key. return Jwts.builder() .setExpiration(from(now().plusDays(EXP\_DAYS).atZone(ZONE\_ID).toInstant… --- ## [What happens if someone gets my RefreshToken cookie?](https://community.auth0.com/t/what-happens-if-someone-gets-my-refreshtoken-cookie/80508)
**Author:** [@denik1981](https://community.auth0.com/u/denik1981)\ **Replies:** 1\ **Last updated:** [March 25, 2022, 1:59am UTC](https://community.auth0.com/t/what-happens-if-someone-gets-my-refreshtoken-cookie/80508 "2022-03-25T01:59:15Z")
So I have seen the common use case on where the access token is renewed by sending a refreshtoken to the server endpoint aimed for that renewal. My question is, based that I see a lot of cases where the refreshtoken is … --- ## [Authorizing third party API access with JWT](https://community.auth0.com/t/authorizing-third-party-api-access-with-jwt/80032)
**Author:** [@joe.a](https://community.auth0.com/u/joe.a)\ **Replies:** 1\ **Last updated:** [March 17, 2022, 1:07pm UTC](https://community.auth0.com/t/authorizing-third-party-api-access-with-jwt/80032 "2022-03-17T13:07:57Z")
Hi, We built an API for our application that is authenticated and authorized using JWT from Auth0. It works great! Now we have a third party application that would like to call these APIs from a SPA on their website. I… --- ## [Still get RS256 token](https://community.auth0.com/t/still-get-rs256-token/79506)
**Author:** [@hyun.park](https://community.auth0.com/u/hyun.park)\ **Replies:** 2\ **Last updated:** [March 9, 2022, 11:59pm UTC](https://community.auth0.com/t/still-get-rs256-token/79506 "2022-03-09T23:59:11Z")
I changed default token algorithm to HS256 but when I decode access token, alg in token is still RS256. How can I get access token with HS256? What I did was Dashboard \> Applications \> Advanced Settings \> OAuth \> disab… --- ## [JWT best practice and understanding](https://community.auth0.com/t/jwt-best-practice-and-understanding/79211)
**Author:** [@HuG](https://community.auth0.com/u/HuG)\ **Replies:** 3\ **Last updated:** [March 4, 2022, 11:32am UTC](https://community.auth0.com/t/jwt-best-practice-and-understanding/79211 "2022-03-04T11:32:24Z")
Dear all, I have an SPA (React) and a back-end API (Python), and I use a JWT access\_token to authorize the client to use the API. My requirements in the back-end are: authorization to access the API, and identification… --- ## [Requesting accessToken not returning a valid JWT](https://community.auth0.com/t/requesting-accesstoken-not-returning-a-valid-jwt/78958)
**Author:** [@halsdunes](https://community.auth0.com/u/halsdunes)\ **Replies:** 4\ **Last updated:** [February 28, 2022, 10:25am UTC](https://community.auth0.com/t/requesting-accesstoken-not-returning-a-valid-jwt/78958 "2022-02-28T10:25:32Z")
I have a NextJS app that uses the @auth0/nextjs-auth0 as its authentication library. I’m trying to get an access token but the returned JWT is not a valid object according to jwt.io. For reference, this is my .env.local … --- ## [Jwt missing scope](https://community.auth0.com/t/jwt-missing-scope/77558)
**Author:** [@g.padres](https://community.auth0.com/u/g.padres)\ **Replies:** 8\ **Last updated:** [February 4, 2022, 9:13pm UTC](https://community.auth0.com/t/jwt-missing-scope/77558 "2022-02-04T21:13:12Z")
Hi, We are creating staging environments, and while replicating our dev environment (with corresponding Auth0 tenant) we noticed that requested scopes were not being present in the JWT (as in our dev env). We’ve done re… --- ## [No payload in access token](https://community.auth0.com/t/no-payload-in-access-token/76936)
**Author:** [@joelheath29](https://community.auth0.com/u/joelheath29)\ **Replies:** 4\ **Last updated:** [January 28, 2022, 9:27am UTC](https://community.auth0.com/t/no-payload-in-access-token/76936 "2022-01-28T09:27:14Z")
Hello everyone! I’m trying to get JWT access tokens for users that log into my website, so I can use the JWT’s on my server to authenticate requests, however, all of the access tokens I am getting are not working. This … --- ## [Validate Access Token In Remix](https://community.auth0.com/t/validate-access-token-in-remix/77086)
**Author:** [@Alien10](https://community.auth0.com/u/Alien10)\ **Replies:** 2\ **Last updated:** [January 27, 2022, 9:08am UTC](https://community.auth0.com/t/validate-access-token-in-remix/77086 "2022-01-27T09:08:52Z")
Hi, I want to make an endpoint that can only be accessed by logged in users so I want to validate a access token, but I can not do it in express because I am using cloudflare page (that uses cloudflare workers for serve… --- ## [Token signature verify issue](https://community.auth0.com/t/token-signature-verify-issue/76135)
**Author:** [@nacho88](https://community.auth0.com/u/nacho88)\ **Replies:** 1\ **Last updated:** [January 11, 2022, 4:24pm UTC](https://community.auth0.com/t/token-signature-verify-issue/76135 "2022-01-11T16:24:13Z")
Hi there, I have an issue that is bothering me because I couldn’t figure out the problem. I cannot verify the token signature using the well-known public certificate, but I can do it with the public one on JWT.io. So, w… --- ## [How to update claim identity received in asp.net core application](https://community.auth0.com/t/how-to-update-claim-identity-received-in-asp-net-core-application/74400)
**Author:** [@sushama](https://community.auth0.com/u/sushama)\ **Replies:** 6\ **Last updated:** [December 9, 2021, 5:32pm UTC](https://community.auth0.com/t/how-to-update-claim-identity-received-in-asp-net-core-application/74400 "2021-12-09T17:32:47Z")
I have an asp.net core application…in which when user logged in we checked either this user have valid subscription or not …and according to this i need to update identity value from claim principle is it possible to upd… --- ## [Request User Authorization for procedure](https://community.auth0.com/t/request-user-authorization-for-procedure/74075)
**Author:** [@aequilux](https://community.auth0.com/u/aequilux)\ **Replies:** 2\ **Last updated:** [December 2, 2021, 11:06am UTC](https://community.auth0.com/t/request-user-authorization-for-procedure/74075 "2021-12-02T11:06:28Z")
Hello everyone! I’m new to Auth0 and I was hoping you could give me some tips! I’m working on an application (Xamarin Forms) right now that, at some point, needs to send a confirmation link to an email typed by the user… [Previous page](https://community.auth0.com/c/jwt/8.md?page=3) [Next page](https://community.auth0.com/c/jwt/8.md?page=5)